616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 68.707763] audit: type=1400 audit(1755043344.639:572): avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 68.718196] audit: type=1300 audit(1755043344.639:572): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000d10120 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) [ 68.733710] audit: type=1327 audit(1755043344.639:572): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 70.573763] audit: type=1400 audit(1755043346.553:573): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 70.582086] audit: type=1400 audit(1755043346.561:574): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 70.589856] audit: type=1400 audit(1755043346.561:575): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 70.597636] audit: type=1400 audit(1755043346.561:576): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.616500] kauditd_printk_skb: 269 callbacks suppressed [ 75.616504] audit: type=1400 audit(1755043351.596:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.631705] audit: type=1400 audit(1755043351.596:828): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.645451] audit: type=1400 audit(1755043351.596:829): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.654927] audit: type=1400 audit(1755043351.596:830): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.663452] audit: type=1400 audit(1755043351.596:831): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.675690] audit: type=1400 audit(1755043351.596:832): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.688634] audit: type=1400 audit(1755043351.596:833): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.701507] audit: type=1400 audit(1755043351.596:834): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.710506] audit: type=1400 audit(1755043351.596:835): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.719906] audit: type=1400 audit(1755043351.598:836): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 86.959869] kauditd_printk_skb: 357 callbacks suppressed [ 86.959874] audit: type=1106 audit(1755043362.940:938): pid=2098 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 86.975015] audit: type=1104 audit(1755043362.941:939): pid=2098 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 86.989068] audit: type=1106 audit(1755043362.969:940): pid=2095 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 87.011085] audit: type=1104 audit(1755043362.970:941): pid=2095 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 87.022033] audit: type=1131 audit(1755043362.975:942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.17.40:22-139.178.89.65:46010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 88.812175] audit: type=1325 audit(1755043364.792:943): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3221 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.819774] audit: type=1300 audit(1755043364.792:943): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd5ca7ff0 a2=0 a3=1 items=0 ppid=2944 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.836011] audit: type=1327 audit(1755043364.792:943): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 88.843367] audit: type=1325 audit(1755043364.816:944): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3221 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.850988] audit: type=1300 audit(1755043364.816:944): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd5ca7ff0 a2=0 a3=1 items=0 ppid=2944 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.791453] kauditd_printk_skb: 7 callbacks suppressed [ 96.791459] audit: type=1325 audit(1755043372.772:947): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3225 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 96.801970] audit: type=1300 audit(1755043372.772:947): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc0d6e930 a2=0 a3=1 items=0 ppid=2944 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.816738] audit: type=1327 audit(1755043372.772:947): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 96.832441] audit: type=1325 audit(1755043372.813:948): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3225 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 96.839853] audit: type=1300 audit(1755043372.813:948): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc0d6e930 a2=0 a3=1 items=0 ppid=2944 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.853881] audit: type=1327 audit(1755043372.813:948): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 96.895361] audit: type=1325 audit(1755043372.876:949): table=filter:95 family=2 entries=18 op=nft_register_rule pid=3227 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 96.902465] audit: type=1300 audit(1755043372.876:949): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc66f9b80 a2=0 a3=1 items=0 ppid=2944 pid=3227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.915067] audit: type=1327 audit(1755043372.876:949): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 96.927365] audit: type=1325 audit(1755043372.908:950): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3227 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 102.921387] kauditd_printk_skb: 185 callbacks suppressed [ 102.921392] audit: type=1400 audit(1755043378.902:1009): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.931439] audit: type=1300 audit(1755043378.902:1009): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3292 pid=3486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.943424] audit: type=1327 audit(1755043378.902:1009): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436663264346638643737646639333931323466373661353139643033 [ 102.954313] audit: type=1400 audit(1755043378.905:1010): avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.963657] audit: type=1400 audit(1755043378.905:1010): avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.980166] audit: type=1400 audit(1755043378.905:1010): avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.988996] audit: type=1400 audit(1755043378.905:1010): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.997003] audit: type=1400 audit(1755043378.905:1010): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 103.005034] audit: type=1400 audit(1755043378.905:1010): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 103.013946] audit: type=1400 audit(1755043378.905:1010): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.381447] kauditd_printk_skb: 40 callbacks suppressed [ 108.381452] audit: type=1400 audit(1755043384.362:1018): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.391916] audit: type=1300 audit(1755043384.362:1018): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3292 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 108.408367] audit: type=1327 audit(1755043384.362:1018): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830316265633165323763353762363732323832366663653934376532 [ 108.424218] audit: type=1400 audit(1755043384.364:1019): avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.433705] audit: type=1400 audit(1755043384.364:1019): avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.442123] audit: type=1400 audit(1755043384.364:1019): avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.451113] audit: type=1400 audit(1755043384.364:1019): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.461808] audit: type=1400 audit(1755043384.364:1019): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.469817] audit: type=1400 audit(1755043384.364:1019): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.479765] audit: type=1400 audit(1755043384.364:1019): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.115164] kauditd_printk_skb: 34 callbacks suppressed [ 121.117259] audit: type=1400 audit(1755043397.095:1025): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.125279] audit: type=1300 audit(1755043397.095:1025): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3292 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.137073] audit: type=1327 audit(1755043397.095:1025): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433353633346231383437343665383462336164386631623165663131 [ 121.151671] audit: type=1400 audit(1755043397.102:1026): avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.162051] audit: type=1400 audit(1755043397.102:1026): avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.175246] audit: type=1400 audit(1755043397.102:1026): avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.183755] audit: type=1400 audit(1755043397.102:1026): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.192012] audit: type=1400 audit(1755043397.102:1026): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.204221] audit: type=1400 audit(1755043397.102:1026): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.216925] audit: type=1400 audit(1755043397.102:1026): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.498285] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 121.501215] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 123.072231] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 123.074672] IPv6: ADDRCONF(NETDEV_CHANGE): cali8a6eb094f9f: link becomes ready [ 123.533500] IPv6: ADDRCONF(NETDEV_CHANGE): califece4df471e: link becomes ready [ 124.533830] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 124.536475] IPv6: ADDRCONF(NETDEV_CHANGE): calia9602b11512: link becomes ready [ 124.707447] IPv6: ADDRCONF(NETDEV_CHANGE): calif0c049a87c1: link becomes ready This is ip-172-31-17-40 (Linux aarch64 5.15.189-flatcar) 00:03:21 SSH host key: SHA256:TjeW6110zE6f2u+XBXHkYrHRtqc+5eSCZJCYqR6NibY (ECDSA) SSH host key: SHA256:RvgvtB9Jqy+h+0Nxy0S3XIYa4mQOO6ItYdyTbVhX+gA (RSA) SSH host key: SHA256:xEeZzRksrgXUz2idEUGhNun+mv0p6WDyTPXhLuvFsOA (ED25519) eth0: 172.31.17.40 fe80::45c:2ff:fe3b:7095 ip-172-31-17-40 login: [ 126.379420] kauditd_printk_skb: 356 callbacks suppressed [ 126.379426] audit: type=1400 audit(1755043402.360:1129): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6755 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 126.396534] audit: type=1300 audit(1755043402.360:1129): arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4010ca3230 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) [ 126.414746] audit: type=1327 audit(1755043402.360:1129): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 126.437039] audit: type=1400 audit(1755043402.362:1130): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 126.458956] audit: type=1300 audit(1755043402.362:1130): arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4010dfc510 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) [ 126.478935] audit: type=1327 audit(1755043402.362:1130): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 126.498953] audit: type=1400 audit(1755043402.362:1131): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 126.515887] audit: type=1300 audit(1755043402.362:1131): arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4010ca3260 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) [ 126.541461] audit: type=1327 audit(1755043402.362:1131): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 126.562950] audit: type=1400 audit(1755043402.362:1132): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 This is ip-172-31-17-40 (Linux aarch64 5.15.189-flatcar) 00:03:22 SSH host key: SHA256:TjeW6110zE6f2u+XBXHkYrHRtqc+5eSCZJCYqR6NibY (ECDSA) SSH host key: SHA256:RvgvtB9Jqy+h+0Nxy0S3XIYa4mQOO6ItYdyTbVhX+gA (RSA) SSH host key: SHA256:xEeZzRksrgXUz2idEUGhNun+mv0p6WDyTPXhLuvFsOA (ED25519) eth0: 172.31.17.40 fe80::45c:2ff:fe3b:7095 ip-172-31-17-40 login: [ 126.673186] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 126.675624] IPv6: ADDRCONF(NETDEV_CHANGE): cali887cc257d98: link becomes ready [ 126.896044] IPv6: ADDRCONF(NETDEV_CHANGE): calia6e6a300362: link becomes ready This is ip-172-31-17-40 (Linux aarch64 5.15.189-flatcar) 00:03:23 SSH host key: SHA256:TjeW6110zE6f2u+XBXHkYrHRtqc+5eSCZJCYqR6NibY (ECDSA) SSH host key: SHA256:RvgvtB9Jqy+h+0Nxy0S3XIYa4mQOO6ItYdyTbVhX+gA (RSA) SSH host key: SHA256:xEeZzRksrgXUz2idEUGhNun+mv0p6WDyTPXhLuvFsOA (ED25519) eth0: 172.31.17.40 fe80::45c:2ff:fe3b:7095 ip-172-31-17-40 login: [ 128.158535] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 128.161773] IPv6: ADDRCONF(NETDEV_CHANGE): cali9fd50bece16: link becomes ready [ 128.418499] IPv6: ADDRCONF(NETDEV_CHANGE): cali1e71e06228c: link becomes ready This is ip-172-31-17-40 (Linux aarch64 5.15.189-flatcar) 00:03:25 SSH host key: SHA256:TjeW6110zE6f2u+XBXHkYrHRtqc+5eSCZJCYqR6NibY (ECDSA) SSH host key: SHA256:RvgvtB9Jqy+h+0Nxy0S3XIYa4mQOO6ItYdyTbVhX+gA (RSA) SSH host key: SHA256:xEeZzRksrgXUz2idEUGhNun+mv0p6WDyTPXhLuvFsOA (ED25519) eth0: 172.31.17.40 fe80::45c:2ff:fe3b:7095 ip-172-31-17-40 login: This is ip-172-31-17-40 (Linux aarch64 5.15.189-flatcar) 00:03:26 SSH host key: SHA256:TjeW6110zE6f2u+XBXHkYrHRtqc+5eSCZJCYqR6NibY (ECDSA) SSH host key: SHA256:RvgvtB9Jqy+h+0Nxy0S3XIYa4mQOO6ItYdyTbVhX+gA (RSA) SSH host key: SHA256:xEeZzRksrgXUz2idEUGhNun+mv0p6WDyTPXhLuvFsOA (ED25519) eth0: 172.31.17.40 fe80::45c:2ff:fe3b:7095 ip-172-31-17-40 login: This is ip-172-31-17-40 (Linux aarch64 5.15.189-flatcar) 00:03:27 SSH host key: SHA256:TjeW6110zE6f2u+XBXHkYrHRtqc+5eSCZJCYqR6NibY (ECDSA) SSH host key: SHA256:RvgvtB9Jqy+h+0Nxy0S3XIYa4mQOO6ItYdyTbVhX+gA (RSA) SSH host key: SHA256:xEeZzRksrgXUz2idEUGhNun+mv0p6WDyTPXhLuvFsOA (ED25519) eth0: 172.31.17.40 fe80::45c:2ff:fe3b:7095 ip-172-31-17-40 login: [ 131.607774] kauditd_printk_skb: 733 callbacks suppressed [ 131.607795] audit: type=1400 audit(1755043407.589:1317): avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.629002] audit: type=1400 audit(1755043407.589:1317): avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.648525] audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.665613] audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.678964] audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.690621] audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.703867] audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.713141] audit: type=1400 audit(1755043407.589:1317): avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.722389] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.723986] audit: type=1400 audit(1755043407.589:1317): avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ip-172-31-17-40 (Linux aarch64 5.15.189-flatcar) 00:03:28 SSH host key: SHA256:TjeW6110zE6f2u+XBXHkYrHRtqc+5eSCZJCYqR6NibY (ECDSA) SSH host key: SHA256:RvgvtB9Jqy+h+0Nxy0S3XIYa4mQOO6ItYdyTbVhX+gA (RSA) SSH host key: SHA256:xEeZzRksrgXUz2idEUGhNun+mv0p6WDyTPXhLuvFsOA (ED25519) eth0: 172.31.17.40 fe80::45c:2ff:fe3b:7095 ip-172-31-17-40 login: [ 136.791738] kauditd_printk_skb: 251 callbacks suppressed [ 136.791742] audit: type=1130 audit(1755043412.773:1388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.17.40:22-139.178.89.65:52718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.992883] audit: type=1101 audit(1755043412.974:1389): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.007211] audit: type=1103 audit(1755043412.974:1390): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.017409] audit: type=1006 audit(1755043412.974:1391): pid=5570 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 137.023724] audit: type=1300 audit(1755043412.974:1391): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd08a770 a2=3 a3=1 items=0 ppid=1 pid=5570 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 137.034667] audit: type=1327 audit(1755043412.974:1391): proctitle=737368643A20636F7265205B707269765D [ 137.058403] audit: type=1105 audit(1755043413.039:1392): pid=5570 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.071077] audit: type=1103 audit(1755043413.043:1393): pid=5572 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.281675] audit: type=1400 audit(1755043413.263:1394): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 137.289784] audit: type=1400 audit(1755043413.263:1395): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 142.504760] kauditd_printk_skb: 73 callbacks suppressed [ 142.504765] audit: type=1130 audit(1755043418.486:1420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.17.40:22-139.178.89.65:52730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 142.700087] audit: type=1101 audit(1755043418.681:1421): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.711813] audit: type=1103 audit(1755043418.681:1422): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.722044] audit: type=1006 audit(1755043418.681:1423): pid=5638 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 142.730704] audit: type=1300 audit(1755043418.681:1423): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec04aed0 a2=3 a3=1 items=0 ppid=1 pid=5638 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.743431] audit: type=1327 audit(1755043418.681:1423): proctitle=737368643A20636F7265205B707269765D [ 142.755276] audit: type=1105 audit(1755043418.736:1424): pid=5638 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.768065] audit: type=1103 audit(1755043418.737:1425): pid=5642 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 143.051936] audit: type=1106 audit(1755043419.033:1426): pid=5638 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 143.065083] audit: type=1104 audit(1755043419.034:1427): pid=5638 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.307422] kauditd_printk_skb: 192 callbacks suppressed [ 149.307427] audit: type=1130 audit(1755043425.289:1493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.17.40:22-139.178.89.65:49966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 149.545409] audit: type=1101 audit(1755043425.527:1494): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.561042] audit: type=1103 audit(1755043425.527:1495): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.581050] audit: type=1006 audit(1755043425.527:1496): pid=5855 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 149.590044] audit: type=1300 audit(1755043425.527:1496): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb19b6f0 a2=3 a3=1 items=0 ppid=1 pid=5855 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.612085] audit: type=1327 audit(1755043425.527:1496): proctitle=737368643A20636F7265205B707269765D [ 149.615617] audit: type=1105 audit(1755043425.585:1497): pid=5855 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.636024] audit: type=1103 audit(1755043425.588:1498): pid=5857 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.044728] audit: type=1106 audit(1755043426.026:1499): pid=5855 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.063649] audit: type=1104 audit(1755043426.027:1500): pid=5855 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.076273] kauditd_printk_skb: 116 callbacks suppressed [ 155.076278] audit: type=1130 audit(1755043431.058:1531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.17.40:22-139.178.89.65:34438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 155.283284] audit: type=1101 audit(1755043431.265:1532): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.294849] audit: type=1103 audit(1755043431.265:1533): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.306534] audit: type=1006 audit(1755043431.265:1534): pid=5977 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 155.313159] audit: type=1300 audit(1755043431.265:1534): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd0ee810 a2=3 a3=1 items=0 ppid=1 pid=5977 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.324545] audit: type=1327 audit(1755043431.265:1534): proctitle=737368643A20636F7265205B707269765D [ 155.345259] audit: type=1105 audit(1755043431.327:1535): pid=5977 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.359488] audit: type=1103 audit(1755043431.341:1536): pid=5979 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.732308] audit: type=1106 audit(1755043431.714:1537): pid=5977 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.751004] audit: type=1104 audit(1755043431.714:1538): pid=5977 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.760159] kauditd_printk_skb: 1 callbacks suppressed [ 160.760163] audit: type=1130 audit(1755043436.743:1540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.17.40:22-139.178.89.65:34450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 160.968087] audit: type=1101 audit(1755043436.951:1541): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.980370] audit: type=1103 audit(1755043436.962:1542): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.991443] audit: type=1006 audit(1755043436.962:1543): pid=6009 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 160.998821] audit: type=1300 audit(1755043436.962:1543): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd114b290 a2=3 a3=1 items=0 ppid=1 pid=6009 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.014818] audit: type=1327 audit(1755043436.962:1543): proctitle=737368643A20636F7265205B707269765D [ 161.035742] audit: type=1105 audit(1755043437.018:1544): pid=6009 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 161.049090] audit: type=1103 audit(1755043437.019:1545): pid=6011 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 161.332810] audit: type=1106 audit(1755043437.313:1546): pid=6009 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 161.348185] audit: type=1104 audit(1755043437.313:1547): pid=6009 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.356615] kauditd_printk_skb: 1 callbacks suppressed [ 166.356620] audit: type=1130 audit(1755043442.340:1549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.17.40:22-139.178.89.65:55382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 166.539466] audit: type=1101 audit(1755043442.522:1550): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.552244] audit: type=1103 audit(1755043442.534:1551): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.562914] audit: type=1006 audit(1755043442.534:1552): pid=6039 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 166.570121] audit: type=1300 audit(1755043442.534:1552): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7686b10 a2=3 a3=1 items=0 ppid=1 pid=6039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.581168] audit: type=1327 audit(1755043442.534:1552): proctitle=737368643A20636F7265205B707269765D [ 166.605158] audit: type=1105 audit(1755043442.588:1553): pid=6039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.617353] audit: type=1103 audit(1755043442.588:1554): pid=6043 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.863866] audit: type=1106 audit(1755043442.847:1555): pid=6039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.876465] audit: type=1104 audit(1755043442.847:1556): pid=6039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.896858] kauditd_printk_skb: 1 callbacks suppressed [ 171.896863] audit: type=1130 audit(1755043447.880:1558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.17.40:22-139.178.89.65:55384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 172.070791] audit: type=1101 audit(1755043448.052:1559): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.081996] audit: type=1103 audit(1755043448.054:1560): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.092748] audit: type=1006 audit(1755043448.054:1561): pid=6053 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 172.099865] audit: type=1300 audit(1755043448.054:1561): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc49c000 a2=3 a3=1 items=0 ppid=1 pid=6053 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.111546] audit: type=1327 audit(1755043448.054:1561): proctitle=737368643A20636F7265205B707269765D [ 172.134480] audit: type=1105 audit(1755043448.117:1562): pid=6053 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.147161] audit: type=1103 audit(1755043448.130:1563): pid=6055 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.400043] audit: type=1106 audit(1755043448.383:1564): pid=6053 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.413247] audit: type=1104 audit(1755043448.384:1565): pid=6053 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.927974] kauditd_printk_skb: 20 callbacks suppressed [ 176.927979] audit: type=1325 audit(1755043452.909:1582): table=filter:127 family=2 entries=22 op=nft_register_rule pid=6098 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 176.937672] audit: type=1300 audit(1755043452.909:1582): arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffe4198150 a2=0 a3=1 items=0 ppid=2944 pid=6098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.952864] audit: type=1327 audit(1755043452.909:1582): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 176.959249] audit: type=1106 audit(1755043452.935:1583): pid=6083 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.975309] audit: type=1104 audit(1755043452.935:1584): pid=6083 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.984820] audit: type=1131 audit(1755043452.940:1585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.17.40:22-139.178.89.65:53862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 176.996170] audit: type=1130 audit(1755043452.968:1586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.17.40:22-139.178.89.65:53868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.006818] audit: type=1325 audit(1755043452.957:1587): table=nat:128 family=2 entries=24 op=nft_register_rule pid=6098 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 177.018705] audit: type=1300 audit(1755043452.957:1587): arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffe4198150 a2=0 a3=1 items=0 ppid=2944 pid=6098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.034707] audit: type=1327 audit(1755043452.957:1587): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 183.346682] kauditd_printk_skb: 33 callbacks suppressed [ 183.346687] audit: type=1130 audit(1755043459.329:1609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.17.40:22-139.178.89.65:48564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.530140] audit: type=1101 audit(1755043459.512:1610): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.544287] audit: type=1103 audit(1755043459.526:1611): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.554744] audit: type=1006 audit(1755043459.530:1612): pid=6146 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 183.562511] audit: type=1300 audit(1755043459.530:1612): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff2aa7e0 a2=3 a3=1 items=0 ppid=1 pid=6146 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.573999] audit: type=1327 audit(1755043459.530:1612): proctitle=737368643A20636F7265205B707269765D [ 183.593743] audit: type=1105 audit(1755043459.575:1613): pid=6146 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.606045] audit: type=1103 audit(1755043459.578:1614): pid=6148 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.847304] audit: type=1106 audit(1755043459.830:1615): pid=6146 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.859226] audit: type=1104 audit(1755043459.831:1616): pid=6146 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.657924] kauditd_printk_skb: 25 callbacks suppressed [ 188.657928] audit: type=1400 audit(1755043464.640:1626): avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 188.670483] audit: type=1300 audit(1755043464.640:1626): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001f27680 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) [ 188.683522] audit: type=1327 audit(1755043464.640:1626): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 188.694493] audit: type=1400 audit(1755043464.642:1627): avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 188.704368] audit: type=1300 audit(1755043464.642:1627): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bfd880 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) [ 188.717272] audit: type=1327 audit(1755043464.642:1627): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 68.707763] audit: type=1400 audit(1755043344.639:572): avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 68.718196] audit: type=1300 audit(1755043344.639:572): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000d10120 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) [ 68.733710] audit: type=1327 audit(1755043344.639:572): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 70.573763] audit: type=1400 audit(1755043346.553:573): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 70.582086] audit: type=1400 audit(1755043346.561:574): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 70.589856] audit: type=1400 audit(1755043346.561:575): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 70.597636] audit: type=1400 audit(1755043346.561:576): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.616500] kauditd_printk_skb: 269 callbacks suppressed [ 75.616504] audit: type=1400 audit(1755043351.596:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.631705] audit: type=1400 audit(1755043351.596:828): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.645451] audit: type=1400 audit(1755043351.596:829): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.654927] audit: type=1400 audit(1755043351.596:830): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.663452] audit: type=1400 audit(1755043351.596:831): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.675690] audit: type=1400 audit(1755043351.596:832): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.688634] audit: type=1400 audit(1755043351.596:833): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.701507] audit: type=1400 audit(1755043351.596:834): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.710506] audit: type=1400 audit(1755043351.596:835): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 75.719906] audit: type=1400 audit(1755043351.598:836): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 86.959869] kauditd_printk_skb: 357 callbacks suppressed [ 86.959874] audit: type=1106 audit(1755043362.940:938): pid=2098 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 86.975015] audit: type=1104 audit(1755043362.941:939): pid=2098 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 86.989068] audit: type=1106 audit(1755043362.969:940): pid=2095 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 87.011085] audit: type=1104 audit(1755043362.970:941): pid=2095 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 87.022033] audit: type=1131 audit(1755043362.975:942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.17.40:22-139.178.89.65:46010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 88.812175] audit: type=1325 audit(1755043364.792:943): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3221 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.819774] audit: type=1300 audit(1755043364.792:943): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd5ca7ff0 a2=0 a3=1 items=0 ppid=2944 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.836011] audit: type=1327 audit(1755043364.792:943): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 88.843367] audit: type=1325 audit(1755043364.816:944): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3221 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.850988] audit: type=1300 audit(1755043364.816:944): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd5ca7ff0 a2=0 a3=1 items=0 ppid=2944 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.791453] kauditd_printk_skb: 7 callbacks suppressed [ 96.791459] audit: type=1325 audit(1755043372.772:947): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3225 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 96.801970] audit: type=1300 audit(1755043372.772:947): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc0d6e930 a2=0 a3=1 items=0 ppid=2944 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.816738] audit: type=1327 audit(1755043372.772:947): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 96.832441] audit: type=1325 audit(1755043372.813:948): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3225 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 96.839853] audit: type=1300 audit(1755043372.813:948): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc0d6e930 a2=0 a3=1 items=0 ppid=2944 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.853881] audit: type=1327 audit(1755043372.813:948): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 96.895361] audit: type=1325 audit(1755043372.876:949): table=filter:95 family=2 entries=18 op=nft_register_rule pid=3227 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 96.902465] audit: type=1300 audit(1755043372.876:949): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc66f9b80 a2=0 a3=1 items=0 ppid=2944 pid=3227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.915067] audit: type=1327 audit(1755043372.876:949): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 96.927365] audit: type=1325 audit(1755043372.908:950): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3227 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 102.921387] kauditd_printk_skb: 185 callbacks suppressed [ 102.921392] audit: type=1400 audit(1755043378.902:1009): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.931439] audit: type=1300 audit(1755043378.902:1009): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3292 pid=3486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.943424] audit: type=1327 audit(1755043378.902:1009): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436663264346638643737646639333931323466373661353139643033 [ 102.954313] audit: type=1400 audit(1755043378.905:1010): avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.963657] audit: type=1400 audit(1755043378.905:1010): avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.980166] audit: type=1400 audit(1755043378.905:1010): avc: denied { bpf } for pid=3486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.988996] audit: type=1400 audit(1755043378.905:1010): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.997003] audit: type=1400 audit(1755043378.905:1010): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 103.005034] audit: type=1400 audit(1755043378.905:1010): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 103.013946] audit: type=1400 audit(1755043378.905:1010): avc: denied { perfmon } for pid=3486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.381447] kauditd_printk_skb: 40 callbacks suppressed [ 108.381452] audit: type=1400 audit(1755043384.362:1018): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.391916] audit: type=1300 audit(1755043384.362:1018): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3292 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 108.408367] audit: type=1327 audit(1755043384.362:1018): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830316265633165323763353762363732323832366663653934376532 [ 108.424218] audit: type=1400 audit(1755043384.364:1019): avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.433705] audit: type=1400 audit(1755043384.364:1019): avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.442123] audit: type=1400 audit(1755043384.364:1019): avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.451113] audit: type=1400 audit(1755043384.364:1019): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.461808] audit: type=1400 audit(1755043384.364:1019): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.469817] audit: type=1400 audit(1755043384.364:1019): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 108.479765] audit: type=1400 audit(1755043384.364:1019): avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.115164] kauditd_printk_skb: 34 callbacks suppressed [ 121.117259] audit: type=1400 audit(1755043397.095:1025): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.125279] audit: type=1300 audit(1755043397.095:1025): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3292 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.137073] audit: type=1327 audit(1755043397.095:1025): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433353633346231383437343665383462336164386631623165663131 [ 121.151671] audit: type=1400 audit(1755043397.102:1026): avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.162051] audit: type=1400 audit(1755043397.102:1026): avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.175246] audit: type=1400 audit(1755043397.102:1026): avc: denied { bpf } for pid=3973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.183755] audit: type=1400 audit(1755043397.102:1026): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.192012] audit: type=1400 audit(1755043397.102:1026): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.204221] audit: type=1400 audit(1755043397.102:1026): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.216925] audit: type=1400 audit(1755043397.102:1026): avc: denied { perfmon } for pid=3973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.498285] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 121.501215] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 123.072231] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 123.074672] IPv6: ADDRCONF(NETDEV_CHANGE): cali8a6eb094f9f: link becomes ready [ 123.533500] IPv6: ADDRCONF(NETDEV_CHANGE): califece4df471e: link becomes ready [ 124.533830] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 124.536475] IPv6: ADDRCONF(NETDEV_CHANGE): calia9602b11512: link becomes ready [ 124.707447] IPv6: ADDRCONF(NETDEV_CHANGE): calif0c049a87c1: link becomes ready This is ip-172-31-17-40 (Linux aarch64 5.15.189-flatcar) 00:03:21 SSH host key: SHA256:TjeW6110zE6f2u+XBXHkYrHRtqc+5eSCZJCYqR6NibY (ECDSA) SSH host key: SHA256:RvgvtB9Jqy+h+0Nxy0S3XIYa4mQOO6ItYdyTbVhX+gA (RSA) SSH host key: SHA256:xEeZzRksrgXUz2idEUGhNun+mv0p6WDyTPXhLuvFsOA (ED25519) eth0: 172.31.17.40 fe80::45c:2ff:fe3b:7095 ip-172-31-17-40 login: [ 126.379420] kauditd_printk_skb: 356 callbacks suppressed [ 126.379426] audit: type=1400 audit(1755043402.360:1129): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6755 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 126.396534] audit: type=1300 audit(1755043402.360:1129): arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4010ca3230 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) [ 126.414746] audit: type=1327 audit(1755043402.360:1129): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 126.437039] audit: type=1400 audit(1755043402.362:1130): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 126.458956] audit: type=1300 audit(1755043402.362:1130): arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4010dfc510 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) [ 126.478935] audit: type=1327 audit(1755043402.362:1130): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 126.498953] audit: type=1400 audit(1755043402.362:1131): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 126.515887] audit: type=1300 audit(1755043402.362:1131): arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4010ca3260 a2=fc6 a3=0 items=0 ppid=2423 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 key=(null) [ 126.541461] audit: type=1327 audit(1755043402.362:1131): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E3430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 126.562950] audit: type=1400 audit(1755043402.362:1132): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c465 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 This is ip-172-31-17-40 (Linux aarch64 5.15.189-flatcar) 00:03:22 SSH host key: SHA256:TjeW6110zE6f2u+XBXHkYrHRtqc+5eSCZJCYqR6NibY (ECDSA) SSH host key: SHA256:RvgvtB9Jqy+h+0Nxy0S3XIYa4mQOO6ItYdyTbVhX+gA (RSA) SSH host key: SHA256:xEeZzRksrgXUz2idEUGhNun+mv0p6WDyTPXhLuvFsOA (ED25519) eth0: 172.31.17.40 fe80::45c:2ff:fe3b:7095 ip-172-31-17-40 login: [ 126.673186] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 126.675624] IPv6: ADDRCONF(NETDEV_CHANGE): cali887cc257d98: link becomes ready [ 126.896044] IPv6: ADDRCONF(NETDEV_CHANGE): calia6e6a300362: link becomes ready This is ip-172-31-17-40 (Linux aarch64 5.15.189-flatcar) 00:03:23 SSH host key: SHA256:TjeW6110zE6f2u+XBXHkYrHRtqc+5eSCZJCYqR6NibY (ECDSA) SSH host key: SHA256:RvgvtB9Jqy+h+0Nxy0S3XIYa4mQOO6ItYdyTbVhX+gA (RSA) SSH host key: SHA256:xEeZzRksrgXUz2idEUGhNun+mv0p6WDyTPXhLuvFsOA (ED25519) eth0: 172.31.17.40 fe80::45c:2ff:fe3b:7095 ip-172-31-17-40 login: [ 128.158535] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 128.161773] IPv6: ADDRCONF(NETDEV_CHANGE): cali9fd50bece16: link becomes ready [ 128.418499] IPv6: ADDRCONF(NETDEV_CHANGE): cali1e71e06228c: link becomes ready This is ip-172-31-17-40 (Linux aarch64 5.15.189-flatcar) 00:03:25 SSH host key: SHA256:TjeW6110zE6f2u+XBXHkYrHRtqc+5eSCZJCYqR6NibY (ECDSA) SSH host key: SHA256:RvgvtB9Jqy+h+0Nxy0S3XIYa4mQOO6ItYdyTbVhX+gA (RSA) SSH host key: SHA256:xEeZzRksrgXUz2idEUGhNun+mv0p6WDyTPXhLuvFsOA (ED25519) eth0: 172.31.17.40 fe80::45c:2ff:fe3b:7095 ip-172-31-17-40 login: This is ip-172-31-17-40 (Linux aarch64 5.15.189-flatcar) 00:03:26 SSH host key: SHA256:TjeW6110zE6f2u+XBXHkYrHRtqc+5eSCZJCYqR6NibY (ECDSA) SSH host key: SHA256:RvgvtB9Jqy+h+0Nxy0S3XIYa4mQOO6ItYdyTbVhX+gA (RSA) SSH host key: SHA256:xEeZzRksrgXUz2idEUGhNun+mv0p6WDyTPXhLuvFsOA (ED25519) eth0: 172.31.17.40 fe80::45c:2ff:fe3b:7095 ip-172-31-17-40 login: This is ip-172-31-17-40 (Linux aarch64 5.15.189-flatcar) 00:03:27 SSH host key: SHA256:TjeW6110zE6f2u+XBXHkYrHRtqc+5eSCZJCYqR6NibY (ECDSA) SSH host key: SHA256:RvgvtB9Jqy+h+0Nxy0S3XIYa4mQOO6ItYdyTbVhX+gA (RSA) SSH host key: SHA256:xEeZzRksrgXUz2idEUGhNun+mv0p6WDyTPXhLuvFsOA (ED25519) eth0: 172.31.17.40 fe80::45c:2ff:fe3b:7095 ip-172-31-17-40 login: [ 131.607774] kauditd_printk_skb: 733 callbacks suppressed [ 131.607795] audit: type=1400 audit(1755043407.589:1317): avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.629002] audit: type=1400 audit(1755043407.589:1317): avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.648525] audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.665613] audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.678964] audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.690621] audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.703867] audit: type=1400 audit(1755043407.589:1317): avc: denied { perfmon } for pid=5026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.713141] audit: type=1400 audit(1755043407.589:1317): avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 131.722389] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.723986] audit: type=1400 audit(1755043407.589:1317): avc: denied { bpf } for pid=5026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ip-172-31-17-40 (Linux aarch64 5.15.189-flatcar) 00:03:28 SSH host key: SHA256:TjeW6110zE6f2u+XBXHkYrHRtqc+5eSCZJCYqR6NibY (ECDSA) SSH host key: SHA256:RvgvtB9Jqy+h+0Nxy0S3XIYa4mQOO6ItYdyTbVhX+gA (RSA) SSH host key: SHA256:xEeZzRksrgXUz2idEUGhNun+mv0p6WDyTPXhLuvFsOA (ED25519) eth0: 172.31.17.40 fe80::45c:2ff:fe3b:7095 ip-172-31-17-40 login: [ 136.791738] kauditd_printk_skb: 251 callbacks suppressed [ 136.791742] audit: type=1130 audit(1755043412.773:1388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.17.40:22-139.178.89.65:52718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.992883] audit: type=1101 audit(1755043412.974:1389): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.007211] audit: type=1103 audit(1755043412.974:1390): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.017409] audit: type=1006 audit(1755043412.974:1391): pid=5570 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 137.023724] audit: type=1300 audit(1755043412.974:1391): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd08a770 a2=3 a3=1 items=0 ppid=1 pid=5570 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 137.034667] audit: type=1327 audit(1755043412.974:1391): proctitle=737368643A20636F7265205B707269765D [ 137.058403] audit: type=1105 audit(1755043413.039:1392): pid=5570 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.071077] audit: type=1103 audit(1755043413.043:1393): pid=5572 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.281675] audit: type=1400 audit(1755043413.263:1394): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 137.289784] audit: type=1400 audit(1755043413.263:1395): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 142.504760] kauditd_printk_skb: 73 callbacks suppressed [ 142.504765] audit: type=1130 audit(1755043418.486:1420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.17.40:22-139.178.89.65:52730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 142.700087] audit: type=1101 audit(1755043418.681:1421): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.711813] audit: type=1103 audit(1755043418.681:1422): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.722044] audit: type=1006 audit(1755043418.681:1423): pid=5638 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 142.730704] audit: type=1300 audit(1755043418.681:1423): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec04aed0 a2=3 a3=1 items=0 ppid=1 pid=5638 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.743431] audit: type=1327 audit(1755043418.681:1423): proctitle=737368643A20636F7265205B707269765D [ 142.755276] audit: type=1105 audit(1755043418.736:1424): pid=5638 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.768065] audit: type=1103 audit(1755043418.737:1425): pid=5642 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 143.051936] audit: type=1106 audit(1755043419.033:1426): pid=5638 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 143.065083] audit: type=1104 audit(1755043419.034:1427): pid=5638 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.307422] kauditd_printk_skb: 192 callbacks suppressed [ 149.307427] audit: type=1130 audit(1755043425.289:1493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.17.40:22-139.178.89.65:49966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 149.545409] audit: type=1101 audit(1755043425.527:1494): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.561042] audit: type=1103 audit(1755043425.527:1495): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.581050] audit: type=1006 audit(1755043425.527:1496): pid=5855 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 149.590044] audit: type=1300 audit(1755043425.527:1496): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb19b6f0 a2=3 a3=1 items=0 ppid=1 pid=5855 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.612085] audit: type=1327 audit(1755043425.527:1496): proctitle=737368643A20636F7265205B707269765D [ 149.615617] audit: type=1105 audit(1755043425.585:1497): pid=5855 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.636024] audit: type=1103 audit(1755043425.588:1498): pid=5857 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.044728] audit: type=1106 audit(1755043426.026:1499): pid=5855 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.063649] audit: type=1104 audit(1755043426.027:1500): pid=5855 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.076273] kauditd_printk_skb: 116 callbacks suppressed [ 155.076278] audit: type=1130 audit(1755043431.058:1531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.17.40:22-139.178.89.65:34438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 155.283284] audit: type=1101 audit(1755043431.265:1532): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.294849] audit: type=1103 audit(1755043431.265:1533): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.306534] audit: type=1006 audit(1755043431.265:1534): pid=5977 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 155.313159] audit: type=1300 audit(1755043431.265:1534): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd0ee810 a2=3 a3=1 items=0 ppid=1 pid=5977 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.324545] audit: type=1327 audit(1755043431.265:1534): proctitle=737368643A20636F7265205B707269765D [ 155.345259] audit: type=1105 audit(1755043431.327:1535): pid=5977 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.359488] audit: type=1103 audit(1755043431.341:1536): pid=5979 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.732308] audit: type=1106 audit(1755043431.714:1537): pid=5977 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.751004] audit: type=1104 audit(1755043431.714:1538): pid=5977 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.760159] kauditd_printk_skb: 1 callbacks suppressed [ 160.760163] audit: type=1130 audit(1755043436.743:1540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.17.40:22-139.178.89.65:34450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 160.968087] audit: type=1101 audit(1755043436.951:1541): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.980370] audit: type=1103 audit(1755043436.962:1542): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.991443] audit: type=1006 audit(1755043436.962:1543): pid=6009 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 160.998821] audit: type=1300 audit(1755043436.962:1543): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd114b290 a2=3 a3=1 items=0 ppid=1 pid=6009 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.014818] audit: type=1327 audit(1755043436.962:1543): proctitle=737368643A20636F7265205B707269765D [ 161.035742] audit: type=1105 audit(1755043437.018:1544): pid=6009 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 161.049090] audit: type=1103 audit(1755043437.019:1545): pid=6011 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 161.332810] audit: type=1106 audit(1755043437.313:1546): pid=6009 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 161.348185] audit: type=1104 audit(1755043437.313:1547): pid=6009 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.356615] kauditd_printk_skb: 1 callbacks suppressed [ 166.356620] audit: type=1130 audit(1755043442.340:1549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.17.40:22-139.178.89.65:55382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 166.539466] audit: type=1101 audit(1755043442.522:1550): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.552244] audit: type=1103 audit(1755043442.534:1551): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.562914] audit: type=1006 audit(1755043442.534:1552): pid=6039 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 166.570121] audit: type=1300 audit(1755043442.534:1552): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7686b10 a2=3 a3=1 items=0 ppid=1 pid=6039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.581168] audit: type=1327 audit(1755043442.534:1552): proctitle=737368643A20636F7265205B707269765D [ 166.605158] audit: type=1105 audit(1755043442.588:1553): pid=6039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.617353] audit: type=1103 audit(1755043442.588:1554): pid=6043 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.863866] audit: type=1106 audit(1755043442.847:1555): pid=6039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.876465] audit: type=1104 audit(1755043442.847:1556): pid=6039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.896858] kauditd_printk_skb: 1 callbacks suppressed [ 171.896863] audit: type=1130 audit(1755043447.880:1558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.17.40:22-139.178.89.65:55384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 172.070791] audit: type=1101 audit(1755043448.052:1559): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.081996] audit: type=1103 audit(1755043448.054:1560): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.092748] audit: type=1006 audit(1755043448.054:1561): pid=6053 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 172.099865] audit: type=1300 audit(1755043448.054:1561): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc49c000 a2=3 a3=1 items=0 ppid=1 pid=6053 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.111546] audit: type=1327 audit(1755043448.054:1561): proctitle=737368643A20636F7265205B707269765D [ 172.134480] audit: type=1105 audit(1755043448.117:1562): pid=6053 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.147161] audit: type=1103 audit(1755043448.130:1563): pid=6055 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.400043] audit: type=1106 audit(1755043448.383:1564): pid=6053 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.413247] audit: type=1104 audit(1755043448.384:1565): pid=6053 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.927974] kauditd_printk_skb: 20 callbacks suppressed [ 176.927979] audit: type=1325 audit(1755043452.909:1582): table=filter:127 family=2 entries=22 op=nft_register_rule pid=6098 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 176.937672] audit: type=1300 audit(1755043452.909:1582): arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffe4198150 a2=0 a3=1 items=0 ppid=2944 pid=6098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.952864] audit: type=1327 audit(1755043452.909:1582): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 176.959249] audit: type=1106 audit(1755043452.935:1583): pid=6083 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.975309] audit: type=1104 audit(1755043452.935:1584): pid=6083 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.984820] audit: type=1131 audit(1755043452.940:1585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.17.40:22-139.178.89.65:53862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 176.996170] audit: type=1130 audit(1755043452.968:1586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.17.40:22-139.178.89.65:53868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.006818] audit: type=1325 audit(1755043452.957:1587): table=nat:128 family=2 entries=24 op=nft_register_rule pid=6098 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 177.018705] audit: type=1300 audit(1755043452.957:1587): arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffe4198150 a2=0 a3=1 items=0 ppid=2944 pid=6098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.034707] audit: type=1327 audit(1755043452.957:1587): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 183.346682] kauditd_printk_skb: 33 callbacks suppressed [ 183.346687] audit: type=1130 audit(1755043459.329:1609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.17.40:22-139.178.89.65:48564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.530140] audit: type=1101 audit(1755043459.512:1610): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.544287] audit: type=1103 audit(1755043459.526:1611): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.554744] audit: type=1006 audit(1755043459.530:1612): pid=6146 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 183.562511] audit: type=1300 audit(1755043459.530:1612): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff2aa7e0 a2=3 a3=1 items=0 ppid=1 pid=6146 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.573999] audit: type=1327 audit(1755043459.530:1612): proctitle=737368643A20636F7265205B707269765D [ 183.593743] audit: type=1105 audit(1755043459.575:1613): pid=6146 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.606045] audit: type=1103 audit(1755043459.578:1614): pid=6148 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.847304] audit: type=1106 audit(1755043459.830:1615): pid=6146 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.859226] audit: type=1104 audit(1755043459.831:1616): pid=6146 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.657924] kauditd_printk_skb: 25 callbacks suppressed [ 188.657928] audit: type=1400 audit(1755043464.640:1626): avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 188.670483] audit: type=1300 audit(1755043464.640:1626): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001f27680 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) [ 188.683522] audit: type=1327 audit(1755043464.640:1626): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 188.694493] audit: type=1400 audit(1755043464.642:1627): avc: denied { watch } for pid=2599 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6753 scontext=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 188.704368] audit: type=1300 audit(1755043464.642:1627): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bfd880 a2=fc6 a3=0 items=0 ppid=2454 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c146,c541 key=(null) [ 188.717272] audit: type=1327 audit(1755043464.642:1627): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 188.877380] audit: type=1130 audit(1755043464.860:1628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.17.40:22-139.178.89.65:48570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.071600] audit: type=1101 audit(1755043465.052:1629): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 189.086215] audit: type=1103 audit(1755043465.065:1630): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 189.096608] audit: type=1006 audit(1755043465.065:1631): pid=6201 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 194.439125] kauditd_printk_skb: 19 callbacks suppressed [ 194.439130] audit: type=1130 audit(1755043470.421:1641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.17.40:22-139.178.89.65:56816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.605530] audit: type=1101 audit(1755043470.588:1642): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.620268] audit: type=1103 audit(1755043470.601:1643): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.639962] audit: type=1006 audit(1755043470.601:1644): pid=6234 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 194.647321] audit: type=1300 audit(1755043470.601:1644): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff97799c0 a2=3 a3=1 items=0 ppid=1 pid=6234 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.658321] audit: type=1327 audit(1755043470.601:1644): proctitle=737368643A20636F7265205B707269765D [ 194.672595] audit: type=1105 audit(1755043470.655:1645): pid=6234 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.684682] audit: type=1103 audit(1755043470.658:1646): pid=6236 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.951955] audit: type=1106 audit(1755043470.934:1647): pid=6234 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.972959] audit: type=1104 audit(1755043470.935:1648): pid=6234 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 199.991315] kauditd_printk_skb: 1 callbacks suppressed [ 199.991320] audit: type=1130 audit(1755043475.973:1650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.17.40:22-139.178.89.65:56818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 200.057167] audit: type=1400 audit(1755043476.040:1651): avc: denied { watch } for pid=5600 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_06.3850234030/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c930 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c521,c930 tclass=file permissive=0 [ 200.073834] audit: type=1300 audit(1755043476.040:1651): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4002700fa0 a2=fc6 a3=0 items=0 ppid=4438 pid=5600 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c930 key=(null) [ 200.093838] audit: type=1327 audit(1755043476.040:1651): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 200.165722] audit: type=1101 audit(1755043476.148:1652): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.178919] audit: type=1103 audit(1755043476.152:1653): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.191369] audit: type=1006 audit(1755043476.152:1654): pid=6248 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 200.199376] audit: type=1300 audit(1755043476.152:1654): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc453bf0 a2=3 a3=1 items=0 ppid=1 pid=6248 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.217226] audit: type=1327 audit(1755043476.152:1654): proctitle=737368643A20636F7265205B707269765D [ 200.233365] audit: type=1105 audit(1755043476.216:1655): pid=6248 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.589773] kauditd_printk_skb: 4 callbacks suppressed [ 205.589777] audit: type=1130 audit(1755043481.573:1660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.17.40:22-139.178.89.65:43380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.793504] audit: type=1101 audit(1755043481.776:1661): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.807177] audit: type=1103 audit(1755043481.790:1662): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.819829] audit: type=1006 audit(1755043481.790:1663): pid=6259 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 205.829130] audit: type=1300 audit(1755043481.790:1663): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe16b190 a2=3 a3=1 items=0 ppid=1 pid=6259 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.849001] audit: type=1327 audit(1755043481.790:1663): proctitle=737368643A20636F7265205B707269765D [ 205.864644] audit: type=1105 audit(1755043481.847:1664): pid=6259 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.879153] audit: type=1103 audit(1755043481.861:1665): pid=6261 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 206.238283] audit: type=1106 audit(1755043482.221:1666): pid=6259 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 206.256555] audit: type=1104 audit(1755043482.221:1667): pid=6259 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 210.833823] kauditd_printk_skb: 1 callbacks suppressed [ 210.833828] audit: type=1400 audit(1755043486.817:1669): avc: denied { watch } for pid=5732 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_06.3687102684/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c194,c690 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c194,c690 tclass=file permissive=0 [ 210.851650] audit: type=1300 audit(1755043486.817:1669): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000c970c0 a2=fc6 a3=0 items=0 ppid=4687 pid=5732 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c194,c690 key=(null) [ 210.867656] audit: type=1327 audit(1755043486.817:1669): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274